CrowdStrike 2025 Global Threat Report: Adversaries have adapted. Have you? Download

CrowdStrike 2025
Global
Threat Report

CrowdStrike 2025
Global
Threat Report

51 sec — the fastest recorded eCrime breakout time
150% increase in China-nexus activity
79% of detections were malware-free

Download

New cyber threat intelligence:

  • Critical events and trends that defined 2024
  • The latest adversary tactics and techniques
  • Tips to strengthen your defenses
Download

The rise of the enterprising adversary

257 Adversaries

The threat landscape evolves

26 New adversaries named by CrowdStrike in 2024

48 min Average eCrime breakout time

Adversaries are running a business

Cybercrime is becoming a highly efficient business, using automation, AI, and advanced social engineering to scale attacks and maximize impact. From vishing to identity-based intrusions, adversaries are more organized and effective than ever.

  • 304
  • FAMOUS CHOLLIMA incidents last year
  • 40%
  • Represented insider threat operations
  • 442%
  • Vishing surge in second half of 2024
  • 79%
  • Of detections were malware-free

Generative AI: The adversary's new best friend

From fictitious profiles to AI-generated emails and websites, adversaries like FAMOUS CHOLLIMA are using genAI to supercharge insider threats and social engineering. With AI-powered deception becoming more convincing, organizations must evolve their defenses.

Know them. Find them.
Stop them.

 

Explore the Adversary Universe to learn how the world’s most dangerous threat actors are targeting organizations like yours.

FAMOUS CHOLLIMA

FAMOUS CHOLLIMA

North Korea

CHATTY SPIDER

CHATTY SPIDER

eCrime

LIMINAL PANDA

LIMINAL PANDA

China

The most anticipated cybersecurity report of the year

Download

FAQs

The CrowdStrike Counter Adversary Operations team performs research that identifies new adversaries, monitors their activities, and captures emerging cyber threat developments. This intelligence is used to conduct proactive threat hunting across the customer base to enable the detection of new and evolving adversary tradecraft.

Enterprising adversaries are threat actors who have adopted a business-like approach to cyberattacks by demonstrating unprecedented adaptability, refining their tactics, and scaling successful operations.

In 2024, social engineering, cloud intrusions, and malware-free techniques surged, and nation-state actors intensified cyber espionage and added AI to their arsenal. To stay ahead of adversaries, organizations must keep up with faster breakout times and stealthier techniques through continuous innovation in defense.
Source: Based on CrowdStrike’s Counter Adversary Operations team’s proprietary threat intelligence gathered in 2024.